diff --git a/apparmor.d/groups/kde/kded b/apparmor.d/groups/kde/kded index 46fcd5df..be586349 100644 --- a/apparmor.d/groups/kde/kded +++ b/apparmor.d/groups/kde/kded @@ -66,17 +66,17 @@ profile kded @{exec_path} { dbus send bus=system path=/org/freedesktop/bolt{,/**} interface=org.freedesktop.DBus.Properties - member=Get, + member=Get peer=(name="{:*,org.freedesktop.bolt}", label=boltd), dbus receive bus=system path=/ interface=org.kde.kf5auth - member=remoteSignal, + member=remoteSignal peer=(name=:*, label=kauth-kded-smart-helper), dbus send bus=system path=/ interface=org.kde.kf5auth - member=performAction, + member=performAction peer=(name="{:*,org.kde.kded.smart}", label=kauth-kded-smart-helper), @{exec_path} mrix, diff --git a/apparmor.d/groups/kde/plasmashell b/apparmor.d/groups/kde/plasmashell index 4afb95b0..dc64e6be 100644 --- a/apparmor.d/groups/kde/plasmashell +++ b/apparmor.d/groups/kde/plasmashell @@ -46,8 +46,6 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) { @{lib}/libheif/ r, @{lib}/libheif/{,**} mr, - @{lib}/kf5/kioslave5 rPx, - @{lib}/kf6/kioworker rPx, @{lib}/kf5/kdesu{,d} rix, @{bin}/dolphin rPUx, # TODO: rPx, @{bin}/ksysguardd rix, diff --git a/apparmor.d/groups/kde/sddm-xsession b/apparmor.d/groups/kde/sddm-xsession index 393f1cf4..52f0903b 100644 --- a/apparmor.d/groups/kde/sddm-xsession +++ b/apparmor.d/groups/kde/sddm-xsession @@ -66,7 +66,7 @@ profile sddm-xsession @{exec_path} { @{HOME}/tmp.* rw, @{system_share_dirs}/im-config/data/{,*} r, - @{system_share_dirs}/im-config/xinputrc.common + @{system_share_dirs}/im-config/xinputrc.common r, owner @{user_share_dirs}/sddm/xorg-session.log w, diff --git a/apparmor.d/profiles-a-f/flatpak-app b/apparmor.d/profiles-a-f/flatpak-app index fbdd9e74..3acff92b 100644 --- a/apparmor.d/profiles-a-f/flatpak-app +++ b/apparmor.d/profiles-a-f/flatpak-app @@ -45,7 +45,6 @@ profile flatpak-app flags=(attach_disconnected,mediate_deleted) { signal (receive) set=(int) peer=flatpak-portal, @{bin}/** rmix, - #aa:exec kioworker @{lib}/** rmix, /app/** rmix, /var/lib/flatpak/app/*/**/@{bin}/** rmix, @@ -56,8 +55,7 @@ profile flatpak-app flags=(attach_disconnected,mediate_deleted) { @{bin}/update-mime-database rPx -> flatpak-app//&update-mime-database, @{bin}/xdg-dbus-proxy rPx -> flatpak-app//&xdg-dbus-proxy, - @{lib}/kf5/kioslave5 rPx, - @{lib}/kf6/kioworker rPx, + #aa:exec kioworker /var/lib/flatpak/app/{,**} r,